Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
File: D0OG59TvxHLBH-nP7z0zCXSzP2E.mft (raw, json)
Hash identifier: Ryp+23b/o+XDU8tZgt5IXVLiZ/VkgcZH/0fiIBpPAtc=
Subject key identifier: BF:22:8F:F0:88:DF:FD:56:21:4F:F3:2D:11:65:4F:AE:7C:F8:4C:85
Authority key identifier: 0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
Certificate issuer: /CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Certificate serial: 019D38661C9032C366E832FC04BD350ADF81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
Manifest number: 0B30
Signing time: Sun 29 Mar 2026 07:01:49 +0000
Manifest this update: Sun 29 Mar 2026 07:01:49 +0000
Manifest next update: Mon 30 Mar 2026 07:01:49 +0000
Files and hashes: 1: D0OG59TvxHLBH-nP7z0zCXSzP2E.crl (hash: mJ7Qm8xsEQnZeVDiBuKS/AktOwiKIrI+TyW9aLzdO8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:1c:90:32:c3:66:e8:32:fc:04:bd:35:0a:df:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Validity
Not Before: Mar 29 07:01:49 2026 GMT
Not After : Mar 30 07:01:49 2026 GMT
Subject: CN=bf228ff088dffd56214ff32d11654fae7cf84c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:e0:ed:bb:a8:19:9e:ee:7f:17:eb:a7:89:
52:72:c6:1b:c8:70:7f:67:52:63:06:3f:58:54:b5:
ce:a6:27:6e:ce:69:79:d0:06:fa:3e:4a:7b:88:10:
ba:0d:ce:71:ab:2a:da:a5:83:90:fe:aa:c2:ac:d7:
b6:10:81:7f:ad:f0:5f:a3:25:ce:1a:77:75:92:86:
80:3d:82:4a:9a:ec:5a:e0:78:8c:ff:8f:c7:cf:cd:
b7:30:0e:27:69:88:29:21:9e:8f:d2:0a:e4:6c:5d:
5c:46:b5:64:d6:3f:84:a1:80:20:86:15:b9:d0:07:
c2:e3:aa:3a:af:06:cc:6c:f8:e3:d5:d0:62:bb:66:
6b:17:56:21:a5:ff:46:f5:4f:e8:1d:97:31:90:98:
fb:f4:95:88:0c:9a:7d:2e:0d:5a:63:9d:40:4f:e6:
f9:86:a5:84:92:82:48:ac:1b:ee:83:36:a2:cc:3a:
7f:46:f5:49:e8:d4:cb:a6:bc:77:94:b3:7d:9c:8f:
06:7a:11:9a:ca:9a:55:be:37:d3:88:be:db:6d:ab:
25:77:9f:54:49:b6:5b:62:b8:7a:40:12:66:c4:74:
48:31:7f:13:9a:c8:51:fb:70:40:a6:a5:9c:3c:ed:
8b:24:15:8b:95:48:0a:63:fd:47:93:78:ff:33:4d:
2f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:22:8F:F0:88:DF:FD:56:21:4F:F3:2D:11:65:4F:AE:7C:F8:4C:85
X509v3 Authority Key Identifier:
keyid:0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d8:b8:2d:f5:32:a1:6e:27:de:0f:a5:3c:67:c1:6f:f8:b9:
b6:08:7a:3e:ac:3b:a8:48:9c:6f:82:4f:8d:d7:9d:2d:ab:d1:
04:4e:aa:36:6d:b7:6c:80:c1:bb:56:b8:3b:b1:af:c5:97:bd:
67:26:00:6b:67:6a:9e:63:05:1f:bd:23:36:e1:02:51:2e:88:
86:15:8b:c6:35:98:8e:1c:67:dc:0b:1c:31:e2:b7:c3:a4:77:
03:ff:1f:b8:e2:fc:2d:9e:37:01:27:33:51:31:88:49:09:71:
e3:c4:f9:f3:d8:cd:8b:86:7a:97:db:2f:8b:c5:03:b1:99:e3:
5e:84:e1:1d:06:95:ed:9f:0a:cd:d3:37:e4:39:52:d5:9d:73:
b7:6a:ed:8f:8a:a1:47:cf:66:61:e6:69:f8:27:3d:cc:35:2f:
03:02:29:5d:7c:73:ef:60:7b:f4:1c:ea:d2:91:f5:d0:a2:fa:
48:85:03:24:62:26:99:92:97:dc:93:e1:b6:2a:88:6a:4b:3e:
0f:f9:01:76:f0:19:c4:9b:e2:06:46:44:ba:7b:20:a4:21:4a:
58:df:52:45:b1:db:5a:06:34:ba:d2:64:16:cc:3b:42:c3:75:
f8:e3:cd:46:b8:19:1c:e0:31:40:d4:cd:39:0c:95:e6:91:75:
90:85:d2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:08 2026 by rpki-client